$ rpki-client -vvf repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft File: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft (raw, json) Hash identifier: 5Ylht5FXVGTaOxiiyysOSwbhSh7kwLyPTyRoX9jFg08= Subject key identifier: 8F:80:B2:77:E4:89:D4:F8:54:B8:44:1D:7E:AF:AC:67:E6:BC:25:D2 Authority key identifier: EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 Certificate issuer: /CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Certificate serial: 185FC925F6FA7818BBE297295C87AAB1FC7FCD90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft Manifest number: 0194 Signing time: Mon 12 May 2025 02:21:18 +0000 Manifest this update: Mon 12 May 2025 02:16:18 +0000 Manifest next update: Thu 15 May 2025 09:41:18 +0000 Files and hashes: 1: EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl (hash: MCSY0sofiqxqULoEemUyry++WAzRQz31xFEd/d2656U=) 2: 3130332e3231392e3131322e302f32342d3234203d3e20313337333432.roa (hash: RJCqubu8qbtGpPN7MXXSa7nQdF5Bw0374TSVNQhH0cg=) 3: 3130332e3131332e332e302f32342d3234203d3e20313337333432.roa (hash: zhfT9dzqYt1bB25St2DI6pASSgOwxgdrMpQzPwr4zdA=) 4: 323030313a6466323a336130303a3a2f34382d3438203d3e20313337333432.roa (hash: ksIEFNaSzeLI+q7xZzyqipfYLMI/o1zxI631Se0BC2U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 21:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:5f:c9:25:f6:fa:78:18:bb:e2:97:29:5c:87:aa:b1:fc:7f:cd:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26 Validity Not Before: May 12 02:16:18 2025 GMT Not After : May 15 09:41:18 2025 GMT Subject: CN=8F80B277E489D4F854B8441D7EAFAC67E6BC25D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:03:92:36:4b:e6:00:8a:80:a8:15:b4:b6:e3: 31:96:95:cd:fd:c1:e5:a7:ad:57:52:03:df:80:39: 48:4c:0e:96:a2:12:ee:2b:8f:e1:ae:a0:46:fc:27: 37:f9:30:81:2d:c8:d6:20:a8:a4:20:66:26:f3:82: 05:e1:f2:0b:a2:11:c8:f3:6c:e1:9b:1a:94:00:7b: 35:4f:ce:c2:c8:91:24:8e:d7:16:4d:ed:ef:cb:13: 12:aa:42:92:41:c8:ea:df:5a:3b:7c:50:fb:9a:f6: 8a:9b:67:bb:56:a5:91:ce:21:e3:67:60:90:bf:62: 84:a3:31:38:b3:42:98:cc:3c:9d:49:4a:c9:77:05: ea:50:54:84:64:3d:d9:56:ac:99:83:0c:3b:04:ea: 69:f5:38:cd:f3:71:03:4f:53:b7:69:52:e3:ce:27: 5f:97:b2:39:11:dd:2d:30:df:9c:fd:3c:92:8f:7e: ee:02:dd:6a:38:ac:10:e1:5d:f1:f2:a3:26:51:8e: 73:de:31:9a:b6:43:8d:a2:47:fd:a5:6f:22:0b:54: 01:39:dd:a9:2a:be:2d:78:39:9e:01:2a:e0:ae:59: c8:f4:d4:bb:4b:d2:32:eb:ae:db:c0:e0:3a:03:6b: a4:ac:77:5c:31:25:f3:81:62:43:3f:d2:76:e7:08: 94:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:80:B2:77:E4:89:D4:F8:54:B8:44:1D:7E:AF:AC:67:E6:BC:25:D2 X509v3 Authority Key Identifier: keyid:EF:D2:09:19:B9:6F:4E:34:FA:9E:4A:0C:CC:23:47:A4:BC:D9:EA:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/EFD20919B96F4E34FA9E4A0CCC2347A4BCD9EA26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:7e:70:95:12:c3:b4:7d:3c:34:60:c0:dc:15:d5:db:63:8f: d3:07:e4:42:c5:c7:e2:e8:35:c5:8c:c4:49:c2:72:69:30:74: 37:7a:b2:a3:3b:8f:15:de:7b:17:04:c7:1b:2b:bf:70:09:e9: ad:93:bc:0b:29:11:27:eb:b8:b5:b6:f5:53:68:00:34:a3:fb: 35:79:b6:e6:fb:ee:3d:59:58:f5:68:a4:8b:a4:e8:6e:3e:c5: 18:72:ae:f0:6b:0c:af:39:b6:5a:df:5d:9a:c9:33:b0:b2:dc: 3c:8b:d1:ff:17:21:44:52:9c:69:8a:98:f9:47:55:e2:35:c7: b8:7f:af:fc:cc:10:4f:56:3d:12:69:dc:74:69:a4:80:84:ba: 5f:77:83:8e:bd:fb:e5:41:ab:52:14:c6:41:7b:63:9b:90:a2: 32:8d:f4:91:0f:e2:dd:3b:71:11:5c:c1:eb:b4:5a:ec:7f:fb: 00:2b:2c:a9:44:f1:57:1a:e8:c7:52:e6:83:74:70:cb:71:39: c0:d8:25:69:f1:91:ea:54:e1:eb:cf:58:6e:18:55:ec:34:c1: 49:55:60:c6:f1:72:d7:99:2a:3b:7d:55:dc:c2:f3:df:6f:7f: 60:cd:ac:29:92:46:3b:36:96:c2:91:64:93:7e:6b:28:1c:0e: af:cb:bd:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGF/JJfb6eBi74pcpXIeqsfx/zZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRC Q0Q5RUEyNjAeFw0yNTA1MTIwMjE2MThaFw0yNTA1MTUwOTQxMThaMDMxMTAvBgNV BAMTKDhGODBCMjc3RTQ4OUQ0Rjg1NEI4NDQxRDdFQUZBQzY3RTZCQzI1RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcA5I2S+YAioCoFbS24zGWlc39 weWnrVdSA9+AOUhMDpaiEu4rj+GuoEb8Jzf5MIEtyNYgqKQgZibzggXh8guiEcjz bOGbGpQAezVPzsLIkSSO1xZN7e/LExKqQpJByOrfWjt8UPua9oqbZ7tWpZHOIeNn YJC/YoSjMTizQpjMPJ1JSsl3BepQVIRkPdlWrJmDDDsE6mn1OM3zcQNPU7dpUuPO J1+XsjkR3S0w35z9PJKPfu4C3Wo4rBDhXfHyoyZRjnPeMZq2Q42iR/2lbyILVAE5 3akqvi14OZ4BKuCuWcj01LtL0jLrrtvA4DoDa6Ssd1wxJfOBYkM/0nbnCJSXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj4Cyd+SJ1PhUuEQdfq+sZ+a8JdIwHwYDVR0j BBgwFoAU79IJGblvTjT6nkoMzCNHpLzZ6iYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWM0ODc1Ni1iNjYyLTQ2OGEtOTA2ZC02Y2Q0NjFjYjZlNDIvMC9FRkQyMDkxOUI5 NkY0RTM0RkE5RTRBMENDQzIzNDdBNEJDRDlFQTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3QTRCQ0Q5 RUEyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFjNDg3NTYtYjY2Mi00NjhhLTkw NmQtNmNkNDYxY2I2ZTQyLzAvRUZEMjA5MTlCOTZGNEUzNEZBOUU0QTBDQ0MyMzQ3 QTRCQ0Q5RUEyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJh+cJUSw7R9PDRgwNwV1dtjj9MH5ELFx+Lo NcWMxEnCcmkwdDd6sqM7jxXeexcExxsrv3AJ6a2TvAspESfruLW29VNoADSj+zV5 tub77j1ZWPVopIuk6G4+xRhyrvBrDK85tlrfXZrJM7Cy3DyL0f8XIURSnGmKmPlH VeI1x7h/r/zMEE9WPRJp3HRppICEul93g469++VBq1IUxkF7Y5uQojKN9JEP4t07 cRFcweu0Wux/+wArLKlE8Vca6MdS5oN0cMtxOcDYJWnxkepU4evPWG4YVew0wUlV YMbxcteZKjt9VdzC899vf2DNrCmSRjs2lsKRZJN+aygcDq/Lvb0= -----END CERTIFICATE-----Generated at Mon May 12 04:09:50 2025 by rpki-client